DRAFT SOW.docx

STATEMENT OF WORK

SECTION C – DESCRIPTION/SPECIFICATION/WORK STATEMENT

C.1 BACKGROUND

The Naval Surface Warfare Center, Dahlgren Division (NSWCDD) provides support to agencies such as the Navy, the Marine Corps, the Defense Advanced Research Projects Agency (DARPA), and the Federal Bureau of Investigation (FBI) in researching and investigating unique and emergent asymmetric technologies. These agencies require an unbiased assessment of technology and solutions for various avionics, space, land, sea, and undersea technology programs as an independent design agent. Currently, there is a capability gap that exists for engineering, research, and development capabilities that closely align with the existing and emerging technologies. Military and Government systems are undergoing numerous upgrades to enhance their overall ability to accomplish varied missions. Technological advances, both in the military and the commercial sectors, are making it possible to provide system improvements using both Non-Developmental Items (NDI) and Commercial-Off-The-Shelf (COTS) products in addition to developmental items requiring the standard product development cycles. This effort will provide an independent design agent to determine the system integration alternatives, identify the associated risks, and execute necessary nonproprietary designs.

C.2 SCOPE

Required support shall be provided in accordance with specific individual written Delivery Orders (DOs) issued by NSWCDD within the scope of the Statement of Work (SOW) of this contract. The purpose of this procurement is to acquire research and developmental engineering and technical services, independent assessment and validation, and prototype fabrication support for miniaturization technology insertion, technology demonstration, engineering refinement, experiments, and developmental studies.

This effort will provide research and developmental support to identify end-to-end system-level approaches to miniaturization that will enable ultra-dense systems to occupy ever-thinner volumes with increasingly complex functionality. This effort will also provide research and development support for specialized software applications that increase automation for cross-platform coordination and enterprise management for situation awareness, improved prediction of behavior, and early detection of intent. For example, the miniaturization process should provide solutions of multi-chip modules less than 40 microns and for a multi-chip-module chip including a low power microcontroller, digital signal processor, Synchronous Dynamic Random Access Memory (SDRAM), one-million gate Field Programmable Gate Array (FPGA), and 3 axis Micro-Electro-Mechanical (MEMS) accelerometer to be the size of (or smaller than) a dime. Support shall be provided in the areas of independent evaluation, studies and analysis, demonstration and validation, testing, and program management. In some DOs, the Contractor shall be required to purchase COTS items for which the Government does not have unlimited rights to use during testing or miniaturization evaluations. These specific DOs will require the Contractor to purchase proprietary rights or licenses. For example, software modifications may be required to allow proper testing between items being analyzed or when software updates are required due to miniaturization of items. In some DOs, if a Government-Off-The-Shelf (GOTS) or Commercial-Off-The-Shelf (COTS) item(s) is provided by the USG and the USG has unlimited rights, such proprietary rights will be furnished by the Government. Specific rights will be identified in each DO.

Specific assistance will be provided to support, highly specialized microelectronic circuits including MEMs sensors and systems, Global Positioning Systems (GPS), autonomous vehicles, image and display technology, and information and decision systems. This effort will also provide technical designs and approaches including radio frequency tracking and communications systems that push the limits of small size and operational capability in highly challenging environments. Additional functional areas will include dynamic scheduling of data collection, processing, knowledge extraction, sensor architectures, exploitation techniques, and decision systems to improve system performance.

All documentation packages that the Contractor generates shall be provided to the Government on a non-proprietary basis. The Contractor shall provide all the resources necessary to meet the requirements of the SOW. The Government shall have unlimited rights for all deliverables.

This is a Task Order for the provision of services by the Contractor. In accordance with (IAW) law and policy and with the terms and conditions of this Task Order, Contractor personnel shall perform as required by this Statement of Work (SOW), and such work shall include working in cooperation and collaboration with Government personnel. Performance of this Task Order work shall require the Contractor to access and use Government owned data such as software, documentation, technical data, process and report templates. Any and all software, documentation, and technical data generated from such access and use shall remain Government owned data. The Contractor’s use of and access to Government owned data shall neither constitute nor create any Contractor rights in or license to such data; the only Contractor permissions to use and access the data shall be those necessarily required by the Contractor to perform the work herein. Rights in data constituting and contained in contract deliverables required by the Contract Data Requirements List (CDRL) shall be governed by the appropriate contract clauses.

C.3 REQUIREMENTS

C.3.1 Independent Evaluation and Development Support The Contractor shall conduct evaluations, systems analysis, and development for the tasks described in this section.

C.3.1.1 Guidance, Navigation and Control Systems (GN&C) The Contractor shall develop, design, and conduct independent quantitative performance evaluation tests and criteria for developmental and operational strategic and tactical GN&C systems and components, and related Command, Control and Communication (C3) systems (CDRL A006, CDRL A007). The Contractor shall research and formulate recommendations for system improvements and miniaturization based upon this independent evaluation and assessment (CDRL A002). The Contractor shall identify communication, instrumentation, component and system performance requirements to achieve optimized performance and size (miniaturization) based upon this independent evaluation and assessment. The Contractor shall identify system hardware, software and procedural interfaces required based upon this independent evaluation and assessment. The Contractor shall design and build experimental hardware/systems and conduct system demonstrations based upon this independent evaluation and assessment for the following applications (CDRL A004, CDRL A008).

C.3.1.1.1 Global Positioning System (GPS) The Contractor shall provide engineering services for the research, evaluation, development, and prototype application of GPS solutions, to include the miniaturization of GPS solutions, utilized in positioning, tracking, and navigational systems for vehicles (CDRL A002, CDRL A005).

C.3.1.1.2 Command, Control, Communications, and Intelligence Systems The Contractor shall research, evaluate, design and develop communication sensing and information processing systems for real-time command and control of single and multiple operational devices to support the miniaturization of these devices (CDRL A002, CDRL A005, CDRL A008).

C.3.1.1.3 Information and Decision Systems The Contractor shall provide research and evaluation services to design and demonstrate systems for information management and networks control with a focus on robustness, security, and simplification of human operability and to ensure coordinated and effective employment of systems and assets. The Contractor shall design and develop systems for timely, reliable and secure production and communication of information in support of mission planning, simulation, rehearsal, execution and assessment, based upon independent evaluation and assessment (CDRL A002, CDRL A005, CDRL A008).

C.3.1.2 Electronics and Micro-electro-mechanical (MEMs) Technologies The Contractor shall research, design, develop, and create experimental hardware to evaluate the use of MEM technologies in electronic, magnetic, and photonic devices, modules and systems for application to communications, sensing imaging, radar, signal processing, data storage, and control based upon system modifications identified during independent evaluation and assessment (CDRL A005, CDRL A008). The Contractor shall provide input on advanced packaging and manufacturing methods including concurrent engineering, based upon system modifications identified during evaluation and assessment (CDRL A002). The Contractor shall fabricate prototype electronics systems of integrated digital functions with analog and radio frequency circuits in a multi-layer, high die count final package under 500 microns thick.

C.3.2 Studies and Analysis

C.3.2.1 Feasibility Assessments and Requirements Analysis The Contractor shall research and conduct feasibility assessments and analysis of Government requested device modifications to determine the validity, necessity, and adequacy of proposed modifications for improvement of system size and performance. The Contractor shall develop feasible options/alternatives for accomplishing the proposed modifications and system integrations, identify the risks associated with the available options, and develop requirements for accomplishing the proposed modifications (CDRL A002).

C.3.2.2 Reliability and Maintainability Studies The Contractor shall study system issues identified during evaluation and assessment for inadequate reliability or difficult maintainability. The Contractor shall identify problems affecting the systems and the root causes for these problems. The Contractor shall research alternatives for reducing the impact of deficiencies on overall reliability and maintainability. The Contractor shall identify new or existing technologies to replace poorly performing and/or obsolete components. The Contractor shall also conduct failure modes and effects analysis (CDRL A002).

C.3.3 Demonstration and Validation To correct system deficiencies identified as a result of assessment and evaluation, the Contractor shall utilize defined requirements or a developed prototype to demonstrate that certain technologies or prototype systems are capable of being fielded. Advanced Concept Technology Demonstrations (ACTDs) shall be included. The Contractor shall document tests to validate all demonstrations (CDRL A006, CDRL A007).

C.3.3.1 Experiments and Science and Technology To correct system deficiencies identified as a result of assessment and evaluation, the Contractor shall provide miniaturized embedded systems development and integration for new and modified systems and subsystems. The Contractor shall research and develop experimental hardware or other functional models to demonstrate the validity, feasibility, effectiveness, cost, and necessity of proposed changes to miniaturize weapons systems or supporting systems. The Contractor shall complete the preliminary and detailed design required for proposed system designs/modifications (CDRL A008). The Contractor shall develop special support equipment to be used in conjunction with system modifications. The Contractor shall perform modification of existing support equipment hardware or software to add additional capabilities or improve reliability or maintainability to support miniaturization requirements (CDRL A009, CDRL A00A).

C.3.3.2 Technology Insertion The Contractor shall demonstrate the application of emerging or existing technology with emphasis on use of COTS hardware and software and NDI to address upgrades of fielded systems for performance, life cycle cost reduction, or replacement due to obsolescence (CDRL A002, CDRL A004).

C.3.4 Testing

C.3.4.1 Modification Test and Evaluation The Contractor shall perform system or subsystem modification analysis and testing to evaluate the impact of proposed modifications to optimize size on existing systems and devices (CDRL A006, CDRL A007). Modification evaluations shall address impacts upon operational systems and related support equipment. The Contractor shall evaluate hardware changes to determine whether changes to other hardware, training devices, technical data, or engineering data are required (CDRL A002).

C.3.4.2 Integration System Test The Contractor shall prepare integration system test plans and procedures to evaluate the impact of proposed modifications to optimize size on integrated systems and devices (CDRL A006). The Contractor shall also conduct system integration testing for modified systems and devices (CDRL A007). This testing shall evaluate the integration of two or more systems and devices.

C.3.4.3 Independent Verification and Validation (IV&V) The Contractor shall provide IV&V support for systems development and documentation performed by the Government or other Contractors. The Contractor shall review documentation and coding and reports generated to provide independent analysis of the best approach to optimization of system and device performance and size (CDRL A002). All levels of IV&V tasks shall be included in this task.

C.3.4.4 Hot Bench Development and Testing The Contractor shall provide validation and testing using a hot bench or similar test environments (CDRL A006, CDRL A007). The Contractor shall implement upgrades to test tools as required to support new modifications and to perform tests on new or modified equipment as specified in the individual Delivery Order.

C.3.5 Task Order Management

C.3.5.1 Progress Report The Contractor shall submit a Contracting Officer’s Management Report. (CDRL A001).

C.3.5.2 In Progress Reviews (IPR) The Contractor shall participate in both formal and informal In Progress Reviews (IPRs) of work being performed. IPRs may be conducted at the overall Task Order level or for specific projects/work areas. Reviews will be scheduled by the Government. An initial formal IPR is planned within 60 days of the Task Order award date and will follow the agenda agreed to by the COR. Subsequent formal IPRs shall be held approximately every 90 days thereafter unless waived by the Government. The IPRs shall be conducted at the Contractor’s facility or the Government’s facility as directed by the Government. At the time the review is scheduled, the Government will communicate the specific purpose of the review and advise the Contractor as to the desired content of the presentation. (CDRL A004)

C.3.5.3 Task Prioritization Meetings The Contractor shall participate in periodic Task Prioritization Meetings with the COR and Subject Matter Experts (SMEs). The purpose of these meetings is to convey the Government’s technical program schedules and priorities and to identify corresponding task priorities for this order. The Contractor shall document meeting minutes of the meetings. (CDRL A00C)

C.4 OTHER DIRECT COSTS

During the performance of this contract the Contractor will have to travel and procure material and consumables to perform the tasking of the SOW.

C.4.1 Travel

The Contractor shall be required to travel in performance of this contract. The numbers of trips and types of personnel traveling shall be limited to the minimum required to accomplish work requirements and shall be requested of and authorized in advance by the COR in writing or by electronic email. All requests must show the appropriate order number, the number or people traveling, the number of days for the trip, the reason for the travel, an estimated cost (with G&A separate) and any high cost or unusual costs expected. The Contractor is not authorized to perform any travel that is not in conjunction with this effort. All travel shall be conducted in accordance with FAR 31.205-46 Travel Costs.

Representative travel locations include:

· Dahlgren, VA

· Washington, DC

The Contractor shall submit trip reports following any travel under this effort. (CDRL A003)

C.4.2 Direct Charge of Materials and Equipment

C.4.2.1 The term “materials” includes supplies, parts, equipment, hardware, and Information Technology (IT) resources including hardware, services, and software. During the performance of this contract, it will be necessary for the Contractor to procure materials to respond to the mission requirements listed in the Statement of Work (SOW). Material costs shall be proposed in each individual Delivery Order proposal. Any material provided by the Contractor is subject to the requirements of the FAR, DFARS, and the applicable Department of Navy regulations and instructions. Charges related to material costs may include general and administrative (G&A) expenses, but shall not include fee or profit.

C.4.2.2 The Government may identify Not to Exceed (NTE) ODC Material Costs for individual delivery orders issued under this effort. Where identified, the NTE material costs provide the maximum allowable cost of materials and shipping for that order.

C.4.2.3 The Contractor will be responsible for providing a complete price or costs analysis of associated material costs. This analysis will thoroughly support a determination that the prices are fair and reasonable and how that conclusion was made. Proposal analysis guidelines in FAR 15.404 outline acceptable procedures that can be used to evaluate these prices/costs. The Contractor shall not enter into any binding agreements with suppliers until the Government has reviewed and concurred with this analysis. The analysis will be submitted electronically to the COR for review and approval, unless already provided as part of the Delivery Order cost proposal.

C.4.2.4 Other items related to Program Support materials needs should be identified in the initial proposal as being a direct charge or as being covered under indirect rates. All such direct charge ODCs shall be fully supported in the initial proposal and must be determined fair and reasonable.

C.5 GOVERNMENT FURNISHED EQUIPMENT, INFORMATION, AND MATERIALS

(a) GFP may be issued under this contract. Each Delivery Order issued by the Government will specify and describe the Government furnished equipment, information, data, documentation, and facilities. The Government may provide equipment or systems for evaluation and analysis, equipment or systems to be tested, or existing electronics or systems (hardware) to be miniaturized.

(b) The Contractor shall maintain and report the inventory of GFP (CDRL A00B) issued under this contract.

(c) The GFP Inventory Log shall identify: Other Plant Equipment (OPE)/Special Test Equipment (STE), TAG Number (Plant Account Number), Contractor sighting, date sighted, sighted location, disposition, serial number.

(d) The specific format shall be pre-approved by the COR and Contracting Officer prior to the first submission.

C.6 MANDATORY REQUIREMENTS

Requirement 1 Facility Clearance The contractor’s primary facility for supporting this contract is required to have a facility clearance of TOP SECRET and must be cleared at the TOP SECRET level for both information processing and storage.

Requirement 2 Personnel Security Clearance All personnel providing technical support under this contract are required to have an active TOP SECRET/SCI clearances at time of award or to be TOP SECRET/SCI eligible at time of award.

C.7 SECURITY

C.7.1 Personnel providing direct support to this effort will be required to have at a minimum a DoD TOP SECRET clearance at time of award. The Contractor will have access to information and compartments with a TOP SECRET / SCI classification. All deliverables associated with this contract are unclassified unless otherwise specified. Access to classified spaces and material and generation of classified material shall be in accordance with the attached DD Form 254. The Department of Defense Contract Security Classification Specification (DD Form 254) provides the security classification requirements for this contract. The Contractor shall obtain facility and personnel security clearances as required by the Department of Industrial Security Program prior to starting to work on tasks requiring clearances. Access to classified spaces and material and generation of classified material shall be in accordance with the NISPOM and the NSWCDD Command Security Manual. Some work accomplished under this contract will be classified up to the level of TOP SECRET. The Contractor shall maintain the capability to store information up to and including TOP SECRET. All data generated under this contract shall be classified in accordance with the guidance in the NISPOM and the NSWCDD Command Security Manual. The Contractor must comply with guidelines specified on the DD254. All deliverables associated with this contract will be non-SCI.

C.7.2 The Contractor shall require access to Non-Sensitive Compartmented Information (Non-SCI) intelligence in order to utilize intelligence documents in support of this contract. Top Secret/Sensitive Compartmented Information (TS/SCI) clearance is required to access technical documentation to perform this work (SI/TK/HCS/G). Personnel providing direct support to this effort shall be cleared to the level of TOP SECRET/SCI. Personnel must be cleared at the SI/TK/G/HCS level in order to have access to SCIF environments. The contractors with SCI clearance will be required to attend intelligence meetings and platforms where SOGINT and SIGINT intelligence information will be discussed. The contractor will also be required to access JWICS information. SIPRNET laboratory environment shall be accessible at the contractor’s facility. The Contractor shall be required to receive and generate classified information at the contractor’s facility. COMSEC is required to allow the contractor to receive keying material to support STE phones at the contractor’s facility. Defense Courier Service is required to transport keying material. The Contractor shall be required to fabricate and store classified hardware at their facility in support of SOW paragraph C.3.1.1 and C.3.1.2. Controlled Unclassified Information (CUI) (formerly For Official Use Only (FOUO) and Personally Identifiable Information (PII)) generated and/or provided under this contract shall be safeguarded and marked as specified in DODI 5200.48, Controlled Unclassified Information (CUI), March 6, 2020.

C.7.3 Facility Clearance: The Contractor shall possess and maintain a TOP SECRET facility clearance as verified within the Industrial Security Facility Database.

C.7.4 Physical Security: The Contractor shall be responsible for safeguarding all Government information or property provided for Contractor use. At the end of each work period, Government information, facilities, equipment and materials shall be secured as specified by the NISPOM and the NSWCDD Command Security Manual. Top Secret storage is required at the Contractor’s facility in order to meet requirements of receiving and generating classified material in accordance with this contract.

C.7.5 Electronic Spillages (ES) are unacceptable and pose a risk to national security. An electronic spillage is defined as classified data placed on an information system (IS), media or hardcopy document possessing insufficient security controls to protect the data at the required classification level, thus posing a risk to national security (e.g., sensitive compartmented information (SCI) onto collateral, Secret onto Unclassified, etc). The Contractor’s performance as it relates to ES will be evaluated by the Government. ES reflects on the overall security posture of NSWCDD and a lack of attention to detail with regard to the handling of classified information of IS security discipline and will be reflected in the Contractor's performance rating. In the event that a Contractor is determined to be responsible for an ES, all direct and indirect costs incurred by the Government for ES remediation will be charged to the Contractor.

C.7.6 NSWCDD Security will continue to be responsible for the corrective action plan in accordance with the security guidance reflected on the DOD Contract Security Classification Specification - DD254. NSWCDD Security will identify the Contractor facility and contract number associated with all electronic spillages during the investigation that involve Contractor support. NSWCDD Security will notify the Contracts Division with the Contractor facility name and contract number, incident specifics and associated costs for clean up. The Contracting Officer will be responsible to work with the Contractor Facility to capture the costs incurred during the spillage clean up. The Contractor is also responsible for taking Information Security Awareness training annually, via their Facility Security Officer (FSO), as part of the mandatory training requirements. If a spillage occurs additional training will be required to prevent recurrence.

C.7.7 Portable Electronic Devices (PEDs)

C.7.7.1 Non-government and/or personally owned portable electronic devices (PEDs) are prohibited in all NSWCDD buildings with the exception of personally owned cell phones which are authorized for use in spaces up to and including Controlled Access Areas. The Contractor shall ensure the onsite personnel remain compliant with this PED policy. NSWCDD instruction defines PEDs as the following: any electronic device designed to be easily transported, with the capability to store, record, receive or transmit text, images, video, or audio data in any format via any transmission medium. PED’s include, but are not limited to, pagers, laptops, radios, compact discs and cassette players/recorders. In addition, this includes removable storage media such as flash memory, memory sticks, multimedia cards and secure digital cards, micro-drive modules, ZIP drives, ZIP disks, CD-RWs, DVD-RWs, MP3 players, iPADs, digital picture frames, electronic book readers, kindle, nook, cameras, external hard dish drives, and floppy diskettes.

C.7.7.2 Personal Wearable Fitness Devices (PWFDs) marketed primarily as fitness or sleep devices are allowed in all Navy spaces where collateral non-Sensitive Compartmented Information (SCI), classified information is processed, stored, or discussed up to and including secret. User must ensure PWFD is compliant with all requirements in NAVADMIN 216/15, Cyber Hygiene Authorization to use Personal Wearable Fitness Devices (e.g., FitBit, Jawbone UP, etc.) in Navy Spaces, dated 14 September 2015 and register PWFD in the NSWCDD Fitness Device Tracker.

C.7.7.3 PED’s belonging to an external organization shall not be connected to NSWCDD networks or infrastructure without prior approval from the NSWCDD Information Assurance and Compliance Branch. This approval will be granted using the TARIS form and action tracker process.

C.7.7.4 Personally owned hardware or software shall not be connected or introduced to any NSWCDD hardware, network or information system infrastructure.

C.7.8 Operations Security (OPSEC)

C.7.8.1 All Contractors (including Subcontractors) shall supplement their current security practices by requiring any personnel involved in executing this contract to complete Government-sponsored and administered Operations Security (OPSEC) training. In addition, all Contractors should be aware of the Critical Information List (CIL) for the department they are supporting as well as the OPSEC plan for NSWCDD. Upon contract award, all identified Contractors (including Subcontractors) shall sign a Contractor's conformance statement and submit it to the NSWCDD COR named in block 13 of the attached DD-254 thereby acknowledging that they will meet the requirements of this contract. The COR shall contact their Department Training Coordinator to schedule key employees to attend the Government-sponsored OPSEC training. The Contractor must immediately notify the Government upon the discovery of any nonconformance with the OPSEC Plan.

C.7.9 Privacy Program Training

C.7.9.1 Privacy Program Training. Privacy training is mandatory for all NSWCDD personnel (military, civilian, and contractor) and must be completed annually. The Total Workforce Management System (TWMS) is the official database for workforce training and is the preferred tool for taking and recording privacy act training. All NSWCDD personnel are responsible for ensuring individual annual privacy training requirements are met.

C.7.10 Visits by Foreign Nationals and Foreign Representatives

C.7.10.1 Contract performance may require that the Contractor host, at an off-base location, foreign nationals and/or foreign representatives. A foreign national is a person who is a citizen of a foreign nation, and who is not a citizen of the United States. A foreign representative is a person who represents a foreign interest in dealings with the U.S. Government, either directly or through dealings with a U.S. Government Contractor. A foreign representative may be a United States citizen.

C.7.10.1.1 A Contractor-hosted visit of a foreign national or foreign representative may be either an “official” visit or an “unofficial” visit. An official visit is a visit where the foreign national or foreign representative is representing a foreign government in an official capacity. An unofficial visit is a visit where the foreign national or foreign representative is not representing a foreign government.

C.7.10.1.2 A visit by a foreign national or a foreign representative may be either “DoD Sponsored” or “Non-DoD Sponsored”. A DoD Sponsored visit is a visit that is coordinated by a DoD entity. A Non-DoD Sponsored visit is a visit that does not involve DoD coordination (A visit by either a foreign national or a foreign representative pursuant to performance by the Contractor under this contract is not considered to be, by itself, a sponsored visit).

C.7.10.2 The Contractor hosting a visit by either a foreign national or a foreign representative is responsible for adherence to Department of Defense and Department of the Navy directives, instructions, regulations, and manuals that govern foreign disclosure. “Foreign Disclosure” is defined as the disclosure of Classified Military Information (CMI) and Controlled Unclassified Information (CUI) to foreign nationals and/or foreign representatives. Disclosure of such information may be accomplished orally, visually, in writing, or by any other medium.

C.7.10.2.1 Classified Military Information (CMI). This is information that is originated by or for the Department of Defense, or a Military Department, or an entity under its jurisdiction and control, and which requires protection in the interest of national security. Such information is designated as TOP SECRET, SECRET, or CONFIDENTIAL.

C.7.10.2.2 Controlled Unclassified Information (CUI). This is information that although unclassified is subject to access or distribution limitations in accordance with statute or regulation. Included is information exempt from mandatory release to the public under the Freedom of Information Act, or information that is subject to export control.

C.7.10.3 Naval Surface Warfare Center Dahlgren Division (NSWCDD) Foreign National Visitor and Foreign Disclosure Application process. The NSWCDD has established a foreign national visitor approval and foreign disclosure process. Whenever, pursuant to the terms of this contract, a visit to a Contractor facility or Contractor workspace by a foreign national or foreign representative is anticipated, and one or more NSWCDD employees will be in attendance at this visit/meeting for the purpose of potential discussions, above the public release level, resulting in disclosure of either CMI or CUI, a completed “NSWCDD Foreign National Visitor and Foreign Disclosure Application” e-form must be supplied to the Contractor’s Facility Security Officer (FSO). The accountable NSWCDD personnel attending the meeting must ensure that the NSWCDD disclosure process has been complied with and an approved copy of the “NSWCDD Foreign National Visitor and Foreign Disclosure Application” generated e-form has been provided to the COR and the Contractor’s FSO. The Contractor’s FSO should ensure that approved copies of the e-form are maintained at their facility as a record of compliance with requirements set forth in the National Industrial Security Program Operating Manual (NISPOM) as well as the requirements set forth above.

C.8 ON-SITE ENVIRONMENTAL AWARENESS

C.8.1 The Contractor shall strictly adhere to all Federal, State and local laws and regulations, Executive Orders, and Department of Defense and Navy policies.

C.8.2 The Contractor shall ensure that each Contractor employee who has been or will be issued a Common Access Card (CAC), performs work in direct support of NSWCDD programs under the NSWCDD Commanding Officer, and sits on-site at NSWCDD, completes the NSWCDD Environmental Awareness Training (EAT) within 30 days of commencing contract performance and at least every 3 years thereafter or as directed by their NSWCDD training coordinator or their COR.

C.8.3 The Contractor shall ensure that each Contractor employee not required to complete the training described in part (b) above (i.e., those who do not have and will not be issued a CAC, do not perform work in direct support of NSWCDD programs under the NSWCDD Commanding Officer, and do not sit on-site at NSWCDD) reads the NSWCDD Environmental Policy Statement within 30 days of commencing contract performance. This document will be available from the COR, however, the policy is also provided on the publicly-available NSWCDD website, https://www.navsea.navy.mil/Home/Warfare-Centers/NSWC-Dahlgren/Resources/.

C.8.4 Within 30 days of commencing contract performance, the Contractor shall certify by e-mail to their COR that the requirements captured by C.8.2 and C.8.3 above have been met. The e-mail shall include each employee name and work site and shall indicate which requirement—C.8.2 or C.8.3 above--each employee has satisfied.

C.8.5 Contractor copies of the records generated by the actions described in C.8.2 and C.8.3 above will be maintained and disposed of by the Contractor in accordance with Secretary of Navy Instruction (SECNAVINST) 5210.8D.

C.9 ON-SITE SAFETY REQUIREMENTS

C.9.1 The Contractor shall strictly adhere to Federal Occupational Safety and Health Agency (OSHA) Regulations, Environmental Protection Agency (EPA) Regulations, and all applicable state and local requirements.

C.9.2 The Contractor shall ensure that each contractor employee reads the document entitled, "Occupational Safety and Health (OSH) Policy Statement" within 30 days of commencing performance at NSWCDD. This document is available at: https://wwwdd.nmci.navy.mil/program/Safety_and_Environmental_Office/Safety/Safety.html

C.9.3 The Contractor shall provide each Contractor employee with the training required to do his/her job safely and in compliance with applicable regulations. The Contractor shall document and provide, upon request, qualifications, certifications, and licenses as required.

C.9.4 The Contractor shall provide each Contractor employee with the personal protective equipment required to do their job safely and in compliance with all applicable regulations.

C.8.5 Contractors working with ionizing radiation (radioactive material or machine sources) must comply with NAVSEA S0420-AA-RAD-010 (latest revision) [provided upon request]. Prior to bringing radioactive materials or machine sources on base, the contractor must notify the Command Radiation Safety Officer in the Safety & Environmental Office.

C.9.6 The Contractor shall ensure that all hazardous materials (hazmat) procured for NSWCDD are procured through or approved through the hazmat procurement process. Hazmat brought into NSWCDD work spaces shall be reviewed and approved by the Safety & Environmental Office prior to use by submitting an Authorized Use List addition form and Safety Data Sheet that shall be routed through the government supervisor responsible for the specific work area. The Authorized Use List addition form can be found at https://wwwdd.nmci.navy.mil/program/Safety_and_Environmental_Office/.

C.9.7 Upon request the contractor shall submit their OSHA 300 Logs (injury/illness rates) for review by the Safety Office. If a contractor's injury/illness rates are above the Bureau of Labor & Statistics industry standards, a safety assessment will be performed by the Safety Office to determine if any administrative or engineering controls can be utilized to prevent further injuries/illnesses, or if any additional PPE or training will be required.

C.9.8 Applicable Contractors shall submit Total Case Incident Rate (TCIR) and Days Away, Restricted and Transfer (DART) rates for the past three years upon request by the Safety Office. A Contractor meets the definition of applicable if its employees worked 1,000 hours or more in any calendar quarter on site and where oversight is not directly provided in day to day activities by the command.

C.9.9 The Contractor shall report all work-related injuries/illnesses that occurred while working at NSWCDD to the Safety Office.

C.9.10 The Contractor shall ensure that all on-site Contractor work at NSWCDD is in accordance with the NSWCDDINST 5100.1D Occupational Safety and Health Instruction, available at:

https://wwwdd.nmci.navy.mil/program/Safety_and_Environmental_Office/Safety/Safety.html

C.10 Detailed Tasks, Cybersecurity (All Items) The Contractor shall implement the security requirements of the clause under Section I of this contract entitled DFARS 252.204-7012, Safeguarding Covered Defense Information and Cyber Incident Reporting, and National Institute of Standards and Technology (NIST) Special Publication 800-171.

C.10.1 System Security Plan (SSP) The Contractor shall develop and submit a Technical Report – Study/Services, POAM and Systems Security Plan (SSP) (CDRL A00D) that implements the security requirements of DFARS 252.204-7012.

In accordance with DFARS 252.204-7012, the SSP shall implement, at a minimum, all security requirements in NIST 800-171 (Rev. 1) standards 3.1 to 3.14; or ensure that any unimplemented security requirements have been adjudicated by an authorized representative of the DoD CIO to be non-applicable or to have an alternative, but equally effective, security measure in its place. The SSP shall provide proof of such adjudication by DoD CIO. Further, the SSP shall contain a description of the system boundary, the operational environment, how the specific security requirements are currently implemented, and the relationships with or connections to other systems. The POAM shall detail how and when the Contractor will meet all security requirements of SP 800-171 that are not fully implemented except for the requirements noted in the specific bullets below, which must be fully implemented in the SSP. The Contractor shall permit the Government to validate information in the SSP every three years, on an ad hoc basis with no notice to the Contractor, other than to coordinate any necessary security requests, but not more than five business days, or upon replacement or rotation of the Government program manager.

The SSP shall:

· Fully implement Multi-factor authentication, including authentication and authorization of users in a manner that is auditable.

· Implement FIPS 140-2 validation encryption at a minimum of Level 1.

· Employ the principle of least privilege or “need to know”.

· Require the Contractor to review, in a manner that can be audited, user privileges at least annually.

· Require monitoring and controlling remote access sessions and includes mechanisms to audit the session and methods.

C.10.2 SSP and POAM Review The Contractor shall allow the Government to evaluate the SSP and POAM upon request, including on the Contractor’s site, on an ad hoc basis. The Government will provide sufficient notification, but not more than five business days, to the Contractor to allow for the processing of visit requests to the site, if necessary. The Contractor shall support this evaluation in accordance with NIST SP 800-171A.

C.10.3 Subcontractors The Contractor shall provide the plan to track flow down of covered defense information and to assess DFARS clause 252.204-7012 compliance for these suppliers/subcontractors (CDRL A00D).

C.10.4 Encryption of Data at Rest Covered Defense Information (CDI) and Covered Contractor Information Systems (CCIS) are defined within clause 252.204-7012. Information at rest is defined as the state of information when it is not in process or in transit and is located on storage devices as specific components of systems. On all CCISs, the Contractor shall encrypt CDI at rest in accordance with NIST 800-171.

C.10.5 Incident Reporting The Contractor shall report cyber incidents, as defined in DFARS 252.204-7012, to the Damage Assessment Management Office (DAMO) via the DIB-Net website within 72 hours, per DFARS 252.204-7012. In addition to the reporting requirements above, the Contractor shall deliver all information related to cyber incidents, defined in DFARS 252.204-7012, in a Technical Report – Study/Services, Cyber Incident Report (CDRL A00E). The Contractor shall segregate DON CUI from Contractor-owned information, when feasible. Segregation may be implemented through logical isolation, physical isolation, a hybrid approach, or other technological processes to achieve required delivery of compromised data in cyber incidents.

C.10.6 Coordination with NCIS The Contractor consents to installation by the Naval Criminal Investigative Service (NCIS) of network sensors, owned and maintained by NCIS, on the Contractor's CCIS or other information technology assets when intelligence indicates a vulnerability or a potential vulnerability for the duration of the contract performance period. If NCIS determines that the Contractor’s own sensor capability is adequate, the Contractor consents to cooperation with NCIS on cybersecurity, to include sharing information from its sensor capability and networks.

Both routinely and in response to emergent developments, NCIS engages in outreach efforts to the defense contracting community to coordinate cybersecurity efforts. The Contractor shall regularly monitor and engage with such efforts to ensure that Contractor is aware of the most up-to-date cybersecurity information and strategies. As part of these efforts, the Contractor shall consider implementing all recommendations from NCIS for additional hardening (e.g., more stringent configuration settings) of DON critical programs and technologies.

C.11 ENTERPRISE-WIDE CONTRACTOR MANPOWER REPORTING APPLICATION (ECMRA)

The Contractor shall report Contractor labor hours (including subcontractor labor hours) required for performance of services provided under this contract for the Naval Surface Warfare Center, Dahlgren Division via a secure data collection site. Contracted services excluded from reporting are based on Product Service Codes (PSCs). The excluded PSCs are:

(1) W, Lease/Rental of Equipment;

(2) X, Lease/Rental of Facilities;

(3) Y, Construction of Structures and Facilities;

(4) S, Utilities ONLY;

(5) V, Freight and Shipping ONLY.

The Contractor is required to completely fill in all required data fields using the following web address https://doncmra.nmci.navy.mil.

Reporting inputs will be for the labor executed during the period of performance during each Government fiscal year (FY), which runs October 1 through September 30. While inputs may be reported any time during the FY, all data shall be reported no later than October 31 of each calendar year. Contractors may direct questions to the help desk, linked at https://doncmra.nmci.navy.mil.